Validation Procedures

Our validation procedures are strict because we want to protect your business as well as your customers. We will do everything within our power to verify that each certificate is issued only to those who have proven their identity.

Domain Validation

The first step in the validation process requires that we verify your control of all domain names in the certificate. Trustwave offers several validation methods: email, DNS, domain beacon, and WHOIS. In general, email validation is the most convenient method.

Email Validation

Trustwave® can validate your domain(s) by sending an email message to the domains' administrators. If you choose this method, you select who receives the email from a set of email addresses that includes addresses listed in the domain's WHOIS record. When the email is received, all the person who receives it must do is to click a link in the email. This opens a web page where the person clicks one button to validate the domain(s).

DNS Validation

Trustwave® can validate your domain(s) by providing you a unique code to place in your domains' DNS record. You enter the code as a TXT resource record, which is an informational type of DNS resource record. Trustwave® then checks your DNS record for the code, which will prove that the person who controls the DNS record for your domain(s) also authorized the certificate request.

Domain Beacon Validation

Trustwave® can validate your domain(s) by providing you a file to place on your website. When Trustwave® retrieves this file from your website, it proves that the person who controls the content of your website also authorized the certificate request.

WHOIS Validation

If none of the previous methods are possible or practical, Trustwave® can use your domain(s) WHOIS record to determine whether your organization is the domain's registered owner. Trustwave® also uses other resources to determine whether you are authorized to request a certificate on behalf of your organization. To use this method, the WHOIS record(s) must be publicly visible and must contain organization information that matches both what Trustwave® discovers and the company's name and information you submitted.

After all of your domains have been validated, the next step begins.

Organization Validation

The organization validation step is where many certificates in validation spend most of their time. We try to make this step as easy as possible for you, but there are times where we may need additional help from you.

During the organization validation process, we will try to locate and verify your business in various databases. If your business is within the US & Canada, we will contact your Secretary of State or provincial authorities to verify the existence and validity of your business. If you are in country outside of the United States, we will attempt to access your data from our available databases.

In the event that we are unable to find your company information, or if your company information doesn't match the data on your CSR, we will ask you for documentation. We can accept almost any type of third-party verifiable documentation.

We can accept the following types of documentation:

  • Articles Of Incorporation (must include State officer seal)
  • Fictitious Name / Doing Business As Document
  • Business Licensing (state/city licensing, right to use tax permit)
  • Bank Statement (must be printed, not from online sources)
  • Merchant Account Statement (must be printed)
  • Utility/Telephone Bills

We cannot accept the following types of documentation

  • Simple letters on corporate letterheads
  • Applications for documentation (such as IRS EIN applications)
  • Government documents without signatures/seals

If your business has no legal documentation, or you would like to use your own personal name on your SSL certificate, we will need a copy of your driver's license, government-issued identification, or passport. Your personal name will appear on the SSL certificate.

When your documentation is ready email the documents to us. Please note your domain name on your documentation so that we can match it quickly with your order.



Certificate Analyzer

Once you have completed your certificate installation you can use our instant online troubleshooter to verify your installation and help resolve problems.
Certificate Analyzer→

Go Green